$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3df9a59d-b357-3204-8e3b-884d6652ccfa.roa File: 3df9a59d-b357-3204-8e3b-884d6652ccfa.roa (raw, json) Hash identifier: EfXXK9mhJYuVTxwfam0Wh18xLLdQZFyjzcMlWDcDbW0= Subject key identifier: CD:F6:10:D1:EF:F4:46:7B:BB:43:50:29:BC:5F:04:43:19:77:56:C7 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848A1361A41156CED45EEE4AAD0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3df9a59d-b357-3204-8e3b-884d6652ccfa.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 174 IP address blocks: 198.16.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1a:41:15:6c:ed:45:ee:e4:aa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=b11f6ca4-bf6f-4323-8d1b-6a3de72d0bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:f8:9e:fa:74:3f:3b:8c:45:2d:3f:d9:be: 0f:61:b9:8d:4a:d7:2c:fe:6e:9f:90:6d:ce:33:76: 67:c8:62:bf:0e:15:14:87:5c:29:78:39:c2:86:8e: 0d:75:d2:79:b1:aa:e8:1f:3a:09:55:41:77:f6:16: 9d:d8:95:23:4d:a1:e4:79:15:d3:96:ca:92:4f:e7: 64:f6:1d:87:c4:5d:2f:e1:f8:c7:2d:0a:ca:a7:20: bd:d4:ec:67:e3:63:0c:6b:c9:9f:a5:64:b6:92:3f: fb:63:53:d4:3e:fd:4b:04:d9:ab:c9:3c:95:b2:74: e8:53:a7:c2:89:00:9b:3d:b4:02:05:ce:f2:6b:a3: d3:30:d7:8b:f2:42:73:32:d1:b4:4e:f9:98:fa:8b: 66:a8:73:72:75:c6:e0:0b:e7:9e:90:49:f4:b9:ff: 32:cc:64:39:a7:3b:fd:61:ce:62:09:95:9d:05:d3: 07:e7:9d:33:72:58:13:bb:0a:6d:6c:d7:66:e9:c5: 17:ee:09:7e:b0:62:ca:71:6e:ef:03:2f:1e:39:4f: 19:f1:1e:10:b1:4b:90:50:26:22:a0:48:c7:f8:92: 39:8f:d0:f2:c1:a5:fd:9d:ab:9c:b8:16:42:c6:b6: 9e:f0:25:d1:5a:52:58:a9:25:2f:54:78:81:11:60: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:10:D1:EF:F4:46:7B:BB:43:50:29:BC:5F:04:43:19:77:56:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3df9a59d-b357-3204-8e3b-884d6652ccfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:6d:5a:42:72:1c:9f:9c:8f:4f:23:c7:b3:44:b3:9b:01:ea: 2d:18:ca:d6:7a:c1:87:23:69:27:35:78:fb:2e:36:d5:58:29: fc:e5:7e:0a:0b:56:e4:0f:f5:67:02:17:04:d8:6f:92:ee:5f: cc:55:c6:5f:ea:6a:bd:43:58:c6:7f:05:ba:de:3a:cf:fd:6f: 13:95:38:1e:d0:bb:80:ac:fa:a8:d6:23:88:b3:3b:00:e0:80: 30:23:f4:b5:12:7d:ed:9f:7f:24:f9:33:73:1b:f5:2b:4c:d0: 55:e3:b8:48:5a:2a:4d:58:2f:fe:bb:b1:42:f5:8f:bb:15:81: e4:16:ab:06:f5:6d:5c:74:33:c2:07:4f:a0:7c:5d:d4:83:38: f8:9d:96:7e:7a:9f:82:72:13:f3:72:a8:04:2b:b3:12:77:d3: 2b:eb:bf:0b:50:b1:49:99:a7:e4:f7:a9:92:e2:5b:3e:10:43: be:df:30:ab:09:4f:ec:f2:66:4a:89:28:13:ce:86:ae:70:c1: b7:50:ab:d4:1d:a9:9c:1d:33:aa:92:28:8a:0e:24:09:bc:cc: b9:3b:34:b0:b9:b2:3f:4d:c9:3b:88:e8:84:06:15:e2:63:ce: 01:00:f5:19:5e:60:ae:7d:26:3a:00:7b:43:d9:1d:63:01:52: 0e:a1:1f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhpBFWztRe7kqtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk YjExZjZjYTQtYmY2Zi00MzIzLThkMWItNmEzZGU3MmQwYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43r4nvp0PzuMRS0/2b4PYbmNStcs/m6fkG3O M3ZnyGK/DhUUh1wpeDnCho4NddJ5saroHzoJVUF39had2JUjTaHkeRXTlsqST+dk 9h2HxF0v4fjHLQrKpyC91Oxn42MMa8mfpWS2kj/7Y1PUPv1LBNmryTyVsnToU6fC iQCbPbQCBc7ya6PTMNeL8kJzMtG0TvmY+otmqHNydcbgC+eekEn0uf8yzGQ5pzv9 Yc5iCZWdBdMH550zclgTuwptbNdm6cUX7gl+sGLKcW7vAy8eOU8Z8R4QsUuQUCYi oEjH+JI5j9DywaX9naucuBZCxrae8CXRWlJYqSUvVHiBEWAhlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM32ENHv9EZ7u0NQKbxfBEMZd1bHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvM2RmOWE1OWQtYjM1Ny0z MjA0LThlM2ItODg0ZDY2NTJjY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdtWkJyHJ+cj08jx7NEs5sB6i0YytZ6wYcjaSc1ePsuNtVYKfzlfgoL VuQP9WcCFwTYb5LuX8xVxl/qar1DWMZ/BbreOs/9bxOVOB7Qu4Cs+qjWI4izOwDg gDAj9LUSfe2ffyT5M3Mb9StM0FXjuEhaKk1YL/67sUL1j7sVgeQWqwb1bVx0M8IH T6B8XdSDOPidln56n4JyE/NyqAQrsxJ30yvrvwtQsUmZp+T3qZLiWz4QQ77fMKsJ T+zyZkqJKBPOhq5wwbdQq9QdqZwdM6qSKIoOJAm8zLk7NLC5sj9NyTuI6IQGFeJj zgEA9RleYK59JjoAe0PZHWMBUg6hH7k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:36 2025 by rpki-client